Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: GJa/+dJwLsf6B7BiaaLxNAetxChBNvTywLsmfd6FBSY=
Subject key identifier: 97:CA:E0:84:64:BA:22:90:30:F5:3C:B1:6A:E9:6B:18:51:65:50:18
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019A5C794F6C46AD52217419B79A8F15316A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 0409
Signing time: Fri 07 Nov 2025 04:00:45 +0000
Manifest this update: Fri 07 Nov 2025 04:00:45 +0000
Manifest next update: Sat 08 Nov 2025 04:00:45 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: DVhN1Tf0qOANog0rdDjV3f6dJ3pmOC6DnsCbd+YfgG8=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:79:4f:6c:46:ad:52:21:74:19:b7:9a:8f:15:31:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Nov 7 04:00:45 2025 GMT
Not After : Nov 8 04:00:45 2025 GMT
Subject: CN=97cae08464ba229030f53cb16ae96b1851655018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:75:ea:ec:bd:9c:b7:82:23:a2:6e:b9:8d:80:
a5:fb:e2:e9:c1:0b:1e:4f:2f:b2:b4:59:1d:29:c8:
a4:e5:9e:f4:58:b4:31:a9:2a:af:79:78:b0:69:83:
06:63:02:c4:df:da:cc:d4:fd:28:3c:c9:28:8e:bc:
c8:82:80:56:a8:77:97:c6:26:df:2a:32:d4:db:fb:
cc:05:90:74:48:ff:d5:09:0b:0d:d8:e6:bb:e0:ca:
00:f9:1f:3b:8f:ef:e5:b0:e2:88:9e:cb:7d:24:f0:
f4:60:27:d3:fc:f5:2b:14:85:bf:62:4b:2d:c9:64:
ca:ef:90:97:97:f7:91:90:01:4f:02:9a:d6:1b:a5:
34:d9:82:cd:32:c6:76:53:9b:5a:51:c8:b0:43:e2:
f2:5a:fd:62:30:fe:4b:16:1c:f5:7d:69:c5:6c:14:
75:5b:a3:74:6f:64:09:ee:e0:b6:44:3e:68:5d:13:
73:4d:ff:e9:8d:71:19:f7:7d:fe:0d:ce:48:fc:ee:
c3:aa:44:ec:0c:a3:cb:33:b3:d1:47:d2:15:31:6c:
46:64:b2:c9:8c:cb:bf:e4:eb:d0:65:12:1f:77:d0:
74:58:eb:4f:0c:85:ca:f1:d2:55:67:99:59:34:e3:
e9:65:7c:9b:2e:0f:e6:e1:1b:30:1b:5a:5b:d2:35:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CA:E0:84:64:BA:22:90:30:F5:3C:B1:6A:E9:6B:18:51:65:50:18
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bc:97:17:45:d3:5e:b8:58:8d:b8:14:59:4b:83:98:04:bf:
e0:96:fa:15:7f:d9:45:ca:11:89:72:75:88:9c:5a:70:83:22:
97:5c:ea:d4:07:a5:a1:2c:fb:be:df:e9:fc:58:3a:b3:17:2d:
36:b3:d3:3b:ac:dd:a8:9c:0d:85:f4:2a:91:13:37:0c:f4:7d:
79:86:40:06:4d:af:76:78:d3:c1:11:7d:80:da:a1:a5:1d:3a:
50:7e:59:61:80:77:86:98:af:bc:88:b4:75:e3:2e:7c:e1:68:
1f:48:7e:d6:6f:51:03:73:9f:d6:47:3a:ae:8b:2e:12:cf:25:
ca:15:df:51:6d:33:01:65:ba:a9:95:50:76:4c:b2:33:ad:64:
d8:ba:c8:5d:9a:31:f3:58:24:6d:03:47:1e:27:66:84:92:5f:
14:ce:d1:59:75:65:db:4b:86:a7:3e:38:d7:3e:b4:3c:1e:4e:
90:bf:19:7e:1c:28:fe:17:b9:6e:7c:9f:b7:35:38:41:e4:50:
6a:11:26:9b:81:26:a4:62:3b:4d:43:f6:a8:ba:98:6e:72:a7:
0f:eb:8d:c2:6f:75:ec:31:38:0c:eb:55:87:dc:39:43:39:bc:
c9:74:c8:19:e6:77:b2:b8:45:2d:6f:97:47:cd:aa:a2:04:63:
97:74:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:25:19 2025 by rpki-client